Information processing apparatus, information processing method, and system

ABSTRACT

An information processing apparatus receives a completion notification that indicates the completion of updating of first software that controls the display on a first monitor provided in an autonomous vehicle. Then, the information processing apparatus updates, triggered by the reception of the completion notification, second software that controls the display on a second monitor used for remotely monitoring the operation of the autonomous vehicle.

CROSS REFERENCE TO THE RELATED APPLICATION

This application claims the benefit of Japanese Patent Application No.2021-127265, filed on Aug. 3, 2021, which is hereby incorporated byreference herein in its entirety.

BACKGROUND Technical Field

The present disclosure relates to a technology used to remotely monitorthe operation of an autonomous vehicle.

Description of the Related Art

Patent Literature 1 in the citation list below discloses a systemconfigured to update software of devices provided in vehicles by OTA(Over The Air). The system disclosed in Patent Literature 1 includes aserver that distributes updating software to vehicles according to thepriority of updating of software.

Citation List Patent Literature

Patent Literature 1: Japanese Patent Application Laid-Open No.2018-132979

SUMMARY

An object of this disclosure is to provide a technology that enables tomake the items displayed on a monitor provided in an autonomous vehicleand the items displayed on a monitor used for remotely monitoring theoperation of the autonomous vehicle identical to each other.

According to one aspect of the technology disclosed herein, there isprovided an information processing apparatus. The information processingapparatus may comprise a controller including at least one processorconfigured to execute the processing of:

-   receiving a completion notification that indicates the completion of    updating of first software that controls the display on a first    monitor provided in an autonomous vehicle; and-   updating, triggered by the reception of the completion notification,    second software that controls the display on a second monitor used    for remotely monitoring the operation of the autonomous vehicle.

According a second aspect of the technology disclosed herein, there isprovided an information processing method. The information processingmethod may comprise:

-   receiving a completion notification that indicates the completion of    updating of first software that controls the display on a first    monitor provided in an autonomous vehicle; and-   updating, triggered by the reception of the completion notification,    second software that controls the display on a second monitor used    for remotely monitoring the operation of the autonomous vehicle.

According to a third aspect of the technology disclosed herein, there isprovided a system. The system may comprise:

-   an on-vehicle apparatus configured to send a completion notification    indicating the completion of updating of first software that    controls the display on a first monitor provided in an autonomous    vehicle; and-   an information processing apparatus provided with a controller    including at least one processor, the controller being configured to    execute, triggered by the reception of the completion notification,    the processing of updating second software that controls the display    on a second monitor used for remotely monitoring the operation of    the autonomous vehicle.

According to this disclosure, it is possible to make the items displayedon a monitor provided in an autonomous vehicle and the items displayedon a monitor used for remotely monitoring the operation of theautonomous vehicle identical to each other.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram illustrating the general configuration of a vehiclemanagement system.

FIG. 2 is a block diagram illustrating the hardware configurations of avehicle and a monitoring server.

FIG. 3 is a block diagram illustrating an exemplary functionalconfiguration of the monitoring server.

FIG. 4 is a flow chart of an instruction process.

FIG. 5 is a sequence diagram illustrating the procedures of updatingfirst software and second software.

DESCRIPTION OF THE EMBODIMENTS

An autonomous vehicle is provided with a monitor (first monitor) thatdisplays the state of the vehicle. In cases where the operation of theautonomous vehicle is monitored remotely, the state of the vehicle isdisplayed also on a monitor (second monitor) provided outside thevehicle. In order to enable remote recognition of the state of theautonomous vehicle that can be recognized from the items displayed onthe first monitor, it is required to make the items displayed on thefirst monitor and the items displayed on the second monitor identical toeach other.

If the software (first software) that controls the display on the firstmonitor is updated, the items displayed on the first monitor may changein some cases. Therefore, in order to keep the identity of the itemsdisplayed on the first monitor and the items displayed on the secondmonitor, it is necessary to update the software (second software) thatcontrols the display on the second monitor in accordance with the updateof the first software.

To this end, a controller of an information processing apparatusdisclosed herein may be configured to receive a notification thatindicates the completion of updating of the first software. Thisnotification will be referred to as “completion notification”. Thecontroller may be triggered by reception of the completion notificationto update the second software. Thus, it is possible to update the secondsoftware immediately following the update of the first software in theautonomous vehicle. In consequence, even if the items displayed on thefirst monitor changes due to the update of the first software, it ispossible to change the items displayed on the second monitor inconformity with the change in the items displayed on the first monitor.Therefore, even if the first software is updated, the identity of theitems displayed on the first monitor and the items displayed on thesecond monitor can be maintained.

In the following, a specific embodiment of the technology disclosedherein will be described with reference to the drawings. It should beunderstood that the dimensions, materials, shapes, relativearrangements, and other features of the components that will bedescribed in connection with the embodiment are not intended to limitthe technical scope of this disclosure only to them, unless otherwisestated.

Embodiment System Configuration

FIG. 1 is a diagram illustrating the general configuration of a vehiclemanagement system. The vehicle management system 1 is a system thatmanages a vehicle 100. The vehicle 100 is an autonomous vehicle, namelya vehicle capable of traveling autonomously according to a givenoperation plan. The operation of the vehicle 100 is monitored remotelyby an observer. The vehicle management system 1 includes a monitoringserver 200. The monitoring server 200 is a server used to remotelymonitor the operation of the vehicle 100. The vehicle management system1 also includes a distribution server 300. The distribution server 300is a server that distributes or sends to the vehicle 100 varioussoftware for autonomous vehicles that is necessary for management of thetravel or operation of the vehicle 100.

The vehicle 100, the monitoring server 200, and the distribution server300 in the vehicle management system 1 are interconnected by a networkN1. The network N1 may be a WAN (Wide Area Network), namely a globalpublic communication network, such as the Internet, or a telephonecommunication network, such as a cellular phone communication network.

FIG. 2 is a block diagram schematically illustrating the hardwareconfigurations of the vehicle 100 and the monitoring server 200. Thevehicle 100 has a central ECU (Electronic Control Unit) 101, acommunication module 102, a first monitor 103, and a camera 104. Thecentral ECU 101 is a computer that performs centralized control of ECUsthat control various devices provided in the vehicle 100. Thecommunication module 102 is a communication device used to connect thevehicle 100 to the network N1. The communication module 102 communicateswith the monitoring server 200 and the distribution server 300 throughthe network N1 using a certain wireless communication standard, such as3G (3rd Generation) or LTE (Long Term Evolution).

The first monitor 103 is a display device that displays the state of thevehicle 100 in the cabin of the vehicle 100. The items displayed on thefirst monitor 103 as the state of the vehicle 100 includes, for example,the speed of the vehicle 100, an indication of the state of lighting ofthe turn-signal lamps, an indication of the state of lighting of theheadlights, various warnings (e.g. a warning as to the remaining batterycapacity, a door ajar warning, and a brake warning), and variousindications (e.g. an indication of the occurrence of tire slippage andan indication of operation of an anti-theft system). In the case wherethe travel mode of the vehicle 100 is switchable between the mode inwhich the vehicle 100 is driven by a human driver and the mode in whichthe vehicle 100 travels autonomously, the travel mode of the vehicle 100may also be displayed on the first monitor 103 as the state of thevehicle 100. The display of the state of the vehicle 100 on the firstmonitor 103 enables a person in the cabin of the vehicle 100 (a personin the cabin who is in charge of supporting the operation of the vehicle100) to know the state of the vehicle 100.

The first monitor 103 has a monitor ECU 1031. The monitor ECU 1031 is acomputer that controls the first monitor 103. The monitor ECU 1031controls the items displayed on the first monitor 103 by executing firstsoftware stored in a storage unit of the first monitor 103. Therefore,the items displayed on the first monitor 103 is determined by the firstsoftware.

The camera 104 takes images in the cabin of the vehicle 100. The camera104 can capture an image of the screen displayed on the first monitor103. The central ECU 101, the communication module 102, the firstmonitor 103, and the camera 104 in the vehicle 100 can communicate witheach other using a certain in-vehicle communication standard. Thisin-vehicle communication standard may be, for example, CAN (ControllerArea Network) or LIN (Local

Interconnect Network

The monitoring server 200 is a computer having a processor 201, a mainstorage unit 202, an auxiliary storage unit 203, a communicationinterface 204, and a second monitor 205. The processor 201 may be a CPU(Central Processing Unit) or a DSP (Digital Signal Processor). The mainstorage unit 202 may be a RAM (Random Access Memory). The auxiliarystorage unit 203 may be a ROM (Read Only Memory), an HDD (Hard DiskDrive), or a flash memory. The auxiliary storage unit 203 may include aremovable medium (or portable medium). Examples of the removable mediuminclude a USB memory, an SD card, and a disc recording medium, such as aCD-ROM, a DVD disc, and a Blu-ray disc. What is stored in the auxiliarystorage unit 203 includes an operating system (OS), various programs,and various information tables. The processor 201 loads programs storedin the auxiliary storage unit 203 into the main storage unit 202 andexecutes them to implement various controls for monitoring the operationof the vehicle 100.

The communication interface 204 connects the monitoring server 200 tothe network N1. The communication interface 204 may be a LAN (Local AreaNetwork) interface board or a wireless communication circuit forwireless communication.

The second monitor 205 is a display device used to remotely monitor thestate of the vehicle 100. As with the first monitor 103 provided in thevehicle 100, the second monitor 205 also displays the state of thevehicle 100. Information about the state of the vehicle 100 is sent fromthe vehicle 100 to the monitoring server 200 through the network N1. Thecentral ECU 101 of the vehicle 100 commands the communication module 102to send information about the state of the vehicle 100 to the monitoringserver 200. Information about the state of the vehicle 100 is sent fromthe vehicle 100 to the monitoring server 200 periodically atpredetermined intervals. The second monitor 205 displays the state ofthe vehicle 100 based on the information received from the vehicle 100.The display of the state of the vehicle 100 on the second monitor 205enables the observer to know the state of the vehicle 100. The processor201 controls the items displayed on the second monitor 205 by executingsecond software. Therefore, the items displayed on the second monitor205 is determined by the second software.

Some or all of the functions of the monitoring server 200 may beimplemented by a hardware circuit, such as an ASIC or an FPGA. Themonitoring server 200 is not necessarily required to be constructed as asingle integrated component, but it may be constituted by a plurality ofcooperating computers. The monitoring server 200 of this embodimentcorresponds to the information processing apparatus according to thepresent disclosure.

Update of Software

As described above, the monitor ECU 1031 in the vehicle 100 executes thefirst software to control the items displayed on the first monitor 103.It may sometimes be necessary to update the first software stored in thestorage unit of the first monitor 103. On such occasions, data forupdating the first software is sent (or distributed) from thedistribution server 300 to the vehicle 100. Such data will be alsoreferred to as “first data” hereinafter. The communication module 102 ofthe vehicle 100 receives the first data sent from the distributionserver 300. The central ECU 101 commands the monitor ECU 1031 to executethe processing of updating the first software using the first data.

The items displayed on the first monitor 103 may change with the updateof the first software in some cases. To remotely monitor the state ofthe vehicle 100 through the second monitor 205 of the monitoring server200, it is necessary that the items displayed on the second monitor 205be identical with the items displayed on the first monitor 103. Hence,if the items displayed on the first monitor 103 changes, it is necessarythat the items displayed on the second monitor 205 be also changedaccordingly. Therefore, when the first software is updated in thevehicle 100, it is necessary for the second software, which controls theitems displayed on the second monitor 205, to be updated in themonitoring server 200.

To this end, when the first software is updated, data for updating thesecond software is prepared beforehand. This data will also be referredto as “second data” hereinafter. The second data matches the first dataso as to make the items displayed on the second monitor 205 after theupdate of the second software identical to the items displayed on thefirst monitor 103 after the update of the first software. The seconddata prepared beforehand is stored in the auxiliary storage unit 203 ofthe monitoring server 200. The processor 201 reads out the second datafrom the auxiliary storage unit 203 to update the second software. Theprocedures of updating the first software and the second software willbe specifically described later.

Functional Configuration

The functional configuration of the monitoring server 200 will now bedescribed with reference to FIG. 3 . FIG. 3 is a block diagramillustrating an exemplary functional configuration of the monitoringserver 200.

The monitoring server 200 includes, as functional components, a controlpart 210, a communication part 220, a second data storage part 230, andan operation schedule database 240. The communication part 220 has thefunction of connecting the monitoring server 200 to the network. Thecommunication part 220 can be implemented by the communication interface204.

The control part 210 has the function of executing computation forcontrolling the monitoring server 200. The control part 210 can beimplemented by the processor 201. The second data storage part 230stores the second data prepared to update the second software. Theoperation schedule database 240 stores operation schedule of the vehicle100. The operation schedule of the vehicle 100 includes a scheduleduring periods through which the vehicle 100 is out of operation. Thesecond data storage part 230 and the operation schedule database 240 canbe implemented by the auxiliary storage unit 203.

The control part 210 includes, as functional components, an instructionpart 2101 and an update execution part 2102. The instruction part 2101has the function of providing instructions designating the time at whichthe first software is to be updated to the vehicle 100. Specifically,when updating of the first software in the vehicle 100 is needed, themonitoring server 200 determines the time at which the first software isto be updated. Then, the monitoring server 200 provides instructionsdesignating the time at which the first software is to be updated to thevehicle 100. By the time determined by the monitoring server 200 atwhich the first software is to be updated, the second data for updatingthe second software is prepared and stored in the second data storagepart 230. The update execution part 2102 has the function of updatingthe second software using the second data. The processes executed by theinstruction part 2101 and the update execution part 2102 will bespecifically described below.

Instruction Process

An instruction process executed by the monitoring server 200 will now bedescribed with reference to FIG. 4 . The instruction process is executedto provide instructions designating the time at which the first softwareis to be updated to the vehicle 100. FIG. 4 is a flow chart of theinstruction process. This process is executed by the instruction part2101 of the control part 210.

As described above, in this vehicle management system 1, when the firstsoftware is to be updated in the vehicle 100, the distribution server300 sends the first data to the vehicle 100. Before sending the firstdata to the vehicle 100, the distribution server 300 sends to themonitoring server 200 information about the time at which sending (ordistribution) of the first data will become possible. This informationwill also be referred to as “distribution time information” hereinafter.The monitoring server 200 receives the distribution time informationsent from the distribution server 300 through the communication part220. When the monitoring server 200 receives the distribution timeinformation from the distribution server 300, the instruction part 2101executes the process according to the flow chart of FIG. 4 .

In step S101 of the process according to the flow chart of FIG. 4 , thedistribution time information received through the communication part220 is obtained. Then, in step S102, the operation schedule of thevehicle 100 stored in the operation schedule database 240 is retrieved.

Then, in step S103, the time at which the first software is to beupdated is determined based on the distribution time informationobtained in step S101 and the operation schedule retrieved in step S102.Specifically, selected as the time at which the first software is to beupdated is the time at which the operation of the vehicle 100 isscheduled to be suspended after the time at which sending of the firstdata from the distribution server 300 will become possible. As the timeat which the first software is to be updated is selected in this way,the first software can be updated during the vehicle 100 is not inoperation.

Then, in step S104, instruction information that designates the timedetermined in step S103 at which the first software is to be updated issent to the vehicle 100. The instruction information is sent from thecommunication part 220 to the vehicle 100. The vehicle 100 receives theinstruction information sent to it through the communication module 102.Thus, the central ECU 101 of the vehicle 100 can recognize the time atwhich the first software is to be updated.

Updating Process

Next, the process of updating the first software executed in the vehicle100 and the process of updating the second software executed in themonitoring server 200 will be described with reference to FIG. 5 . FIG.5 is a sequence diagram illustrating the process of updating the firstsoftware and the process of updating the second software.

When the time at which the first software is to be updated, which isdesignated by the instruction information received from the monitoringserver 200, comes, the vehicle 100 sends request information thatrequests sending of data for updating to the distribution server 300(S10). Specifically, the central ECU 101 commands the communicationmodule 102 to send this request information. When the distributionserver 300 receives the request information from the vehicle 100, thedistribution server 300 sends the first data to the vehicle 100 (S11).When the vehicle 100 receives the first data through the communicationmodule 102, the central ECU 101 commands the monitor ECU 1031 to executethe processing of updating the first software using the first data.Thus, the first software stored in the storage unit of the first monitor103 is updated (S12).

After the completion of updating of the first software in the vehicle100, the vehicle 100 sends a completion notification to the monitoringserver 200 (S13). The completion notification is information notifyingthat the updating of the first software has been completed.Specifically, the central ECU 101 commands the communication module 102to send the completion notification.

The monitoring server 200 receives the completion notification sent fromthe vehicle 100 through the communication part 220. When thecommunication part 220 receives the completion notification, the updateexecution part 2102 of the control part 210 executes the processing ofupdating the second software. Specifically, the update execution part2102 retrieves the second data stored in the second data storage part230 (S14). Then, the update execution part 2102 executes the processingof updating the second software using the retrieved second data (S15).Thus, the second software is updated in the monitoring server 200.

In the above process, updating of the second software in the monitoringserver 200 is triggered by the reception of the completion notificationsent from the vehicle 100. Thus, it is possible to update the secondsoftware immediately following the update of the first software in thevehicle 100. In consequence, even if the items displayed on the firstmonitor 103 changes due to the update of the first software, it ispossible to change the items displayed on the second monitor 205 inconformity with the change in the items displayed on the first monitor103. Therefore, even if the first software is updated, the identity ofthe items displayed on the first monitor 103 and the items displayed onthe second monitor 205 can be maintained.

When the first software and the second software are to be updated,another possible way of updating them is to update the second softwarefirst and then update the first software after the completion ofupdating of the second software in the order reverse to theabove-described process according to the embodiment. However, thepossibility of troubles occurring during the reception of data forupdating the software or during the process of updating the software ishigher in the vehicle 100 than in the monitoring server 200. Therefore,updating the second software after the completion of updating of thefirst software as in the above process according to the embodiment canachieve the identity of the items displayed on the first monitor 103 andthe items displayed on the second monitor 205 more quickly.

First Modification

There may be cases where the items displayed on the first monitor 103does not change through updating of the first software in the vehicle100. For example, in the case where the subject matter of the update ofthe first software relates to a change in the style of display on thefirst monitor 103 (e.g. a change in a displayed sign or a change in thefont of used in the display) the items displayed on the first monitor103 does not change through the update. In such cases, it is notnecessary to update the second software following the update of thefirst software.

In view of the above, when the monitoring server 200 receives thedistribution time information from the distribution server 300, themonitoring server 200 may also receive information about the subjectmatter of the update of the first software. Then, the monitoring server200 may execute the processing of updating the second software by theabove-described process according the embodiment using the reception ofthe completion notification sent from the vehicle 100 as a trigger onlyin the case where the subject matter of the update of the first softwaresatisfies a predetermined condition. This predetermined condition isthat the subject matter of the update of the first software is one thatleads to a change in the items displayed on the first monitor 103.

Whether the subject matter of the update of the first software satisfiesthe predetermined condition is determined by the control part 210. Inthe case where the subject matter of the update of the first softwarerelates to a change in the style of display on the first monitor 103 asin the exemplary cases mentioned above, it is determined that thesubject matter of the update of the first software does not satisfy thepredetermined condition.

This modification can prevent the second software from being updatedunnecessarily following updating of the first software.

Second Modification

As described above, it is possible in the vehicle 100 to capture animage of the screen displayed on the first monitor 103 using the camera104. The vehicle 100 may be configured to capture an image of the screendisplayed on the first monitor 103 by the camera 104 after thecompletion of updating of the first software. The vehicle 100 may senddata of the image captured by the camera 104 to the monitoring server200. This enables an observer who remotely monitors the operation of thevehicle 100 through the monitoring server 200 to see the items displayedon the first monitor 103 after the update of the first software.

Other Embodiments

The embodiments described above are merely examples, and the presentdisclosure may be changed and implemented as appropriate within thescope of the disclosure. Furthermore, processes and means described inthe present disclosure may be freely combined to the extent that notechnical conflict exists.

Furthermore, a process that is described to be performed by oneapparatus may be shared and performed by a plurality of apparatuses.Processes described to be performed by different apparatuses may beperformed by one apparatus. Which function is to be implemented by whichhardware configuration (server configuration) in a computer system maybe flexibly changed.

The present disclosure may also be implemented by supplying computerprograms for implementing the functions described in the embodimentsdescribed above to a computer, and by one or more processors of thecomputer reading out and executing the programs. Such computer programsmay be provided to the computer by a non-transitory computer-readablestorage medium that can be connected to a system bus of the computer, ormay be provided to the computer through a network. The non-transitorycomputer-readable storage medium may be any type of disk includingmagnetic disks (floppy (registered trademark) disks, hard disk drives(HDDs), etc.) and optical disks (CD-ROMs, DVD discs, Blu-ray discs,etc.), and any type of medium suitable for storing electronicinstructions, such as read-only memories (ROMs), random access memories(RAMs), EPROMs, EEPROMs, magnetic cards, flash memories, or opticalcards.

What is claimed is:
 1. An information processing apparatus comprising acontroller including at least one processor, the controller beingconfigured to execute the processing of: receiving a completionnotification that indicates the completion of updating of first softwarethat controls the display on a first monitor provided in an autonomousvehicle; and updating, triggered by the reception of the completionnotification, second software that controls the display on a secondmonitor used for remotely monitoring the operation of the autonomousvehicle.
 2. The information processing apparatus according to claim 1,wherein the first monitor and the second monitor are monitors thatdisplay the state of the autonomous vehicle.
 3. The informationprocessing apparatus according to claim 1, wherein the controllerreceives the completion notification from the autonomous vehicle.
 4. Theinformation processing apparatus according to claim 1, wherein triggeredby the reception of the completion notification, the controller obtainsdata for updating the second software corresponding to the subjectmatter of the update of the first software from a storage unit andupdates the second software using the obtained data.
 5. The informationprocessing apparatus according to claim 1, wherein the controllerfurther executes the processing of providing instructions designating atime at which the first software is to be updated in the autonomousvehicle to the autonomous vehicle.
 6. The information processingapparatus according to claim 5, wherein the controller further executesthe processing of determining the time at which the first software is tobe updated in the autonomous vehicle on the basis of a distribution timeat which distribution of data for updating the first software willbecome possible and an operation schedule of the autonomous vehicle. 7.The information processing apparatus according to claim 6, wherein thecontroller further executes the processing of receiving informationabout the distribution time from a distribution server that distributesdata for updating the first software to the autonomous vehicle.
 8. Theinformation processing apparatus according to claim 1, wherein thecontroller updates, triggered by the reception of the completionnotification, the second software only in the case where the subjectmatter of the update of the first software satisfies a predeterminedcondition.
 9. An information processing method comprising: receiving acompletion notification that indicates the completion of updating offirst software that controls the display on a first monitor provided inan autonomous vehicle; and updating, triggered by the reception of thecompletion notification, second software that controls the display on asecond monitor used for remotely monitoring the operation of theautonomous vehicle.
 10. The information processing method according toclaim 9, wherein the first monitor and the second monitor are monitorsthat display the state of the autonomous vehicle.
 11. The informationprocessing method according to claim 9, wherein the completionnotification is received from the autonomous vehicle.
 12. Theinformation processing method according to claim 9, further comprisingobtaining , triggered by the reception of the completion notification,data for updating the second software corresponding to the subjectmatter of the update of the first software from a storage unit, whereinthe second software is updated using the obtained data.
 13. Theinformation processing method according to claim 9, further comprisingproviding instructions designating a time at which the first software isto be updated in the autonomous vehicle to the autonomous vehicle. 14.The information processing method according to claim 13, furthercomprising determining the time at which the first software is to beupdated in the autonomous vehicle on the basis of a distribution time atwhich distribution of data for updating the first software will becomepossible and an operation schedule of the autonomous vehicle.
 15. Theinformation processing method according to claim 14, further comprisingreceiving information about the distribution time from a distributionserver that distributes data for updating the first software to theautonomous vehicle.
 16. The information processing method according toclaim 9, wherein the second software is updated, triggered by thereception of the completion notification, in the case where the subjectmatter of the update of the first software satisfies a predeterminedcondition.
 17. A system comprising: an on-vehicle apparatus configuredto send a completion notification indicating the completion of updatingof first software that controls the display on a first monitor providedin an autonomous vehicle; and an information processing apparatusprovided with a controller including at least one processor, thecontroller being configured to execute, triggered by the reception ofthe completion notification, the processing of updating second softwarethat controls the display on a second monitor used for remotelymonitoring the operation of the autonomous vehicle.
 18. The systemaccording to claim 17, wherein the first monitor and the second monitorare monitors that display the state of the autonomous vehicle.
 19. Thesystem according to claim 17, wherein triggered by the reception of thecompletion notification, the controller in the information processingapparatus obtains data for updating the second software corresponding tothe subject matter of the update of the first software from a storageunit and updates the second software using the obtained data.
 20. Thesystem according to claim 17, wherein the controller in the informationprocessing apparatus further executes the processing of sendinginstruction information designating a time at which the first softwareis to be updated in the autonomous vehicle to the on-vehicle apparatus.